Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/f47710-4a23-4bdc-9541-8afa74d8769f/1/GheAknBHDXwlZxEvtAqe9xJgBRY.mft
File: GheAknBHDXwlZxEvtAqe9xJgBRY.mft (raw, json)
Hash identifier: i+uiTI+xtZnZkcXue4tKgsVme1oiT0CA9ei1djXlTSs=
Subject key identifier: 69:F3:76:46:2D:62:0F:35:0E:E8:C1:6E:CD:EF:18:73:0D:6A:BD:C5
Authority key identifier: 1A:17:80:92:70:47:0D:7C:25:67:11:2F:B4:0A:9E:F7:12:60:05:16
Certificate issuer: /CN=1a17809270470d7c2567112fb40a9ef712600516
Certificate serial: 0194BC72FA6F4C43A3AE8DB0E70089B6278C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GheAknBHDXwlZxEvtAqe9xJgBRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/f47710-4a23-4bdc-9541-8afa74d8769f/1/GheAknBHDXwlZxEvtAqe9xJgBRY.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 13:00:39 +0000
Manifest this update: Fri 31 Jan 2025 13:00:39 +0000
Manifest next update: Sat 01 Feb 2025 13:00:39 +0000
Files and hashes: 1: 3n_Nd4cUj6teASapK4pWavXgfU0.roa (hash: KngeXtbNNWR05hMf2WkynvKsVClU9oGlPMx0Mk7lMOM=)
2: GheAknBHDXwlZxEvtAqe9xJgBRY.crl (hash: utyuvLZ5SACcvWKw6fKFohy4e8anddlRyWMqgUMAmAs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:fa:6f:4c:43:a3:ae:8d:b0:e7:00:89:b6:27:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a17809270470d7c2567112fb40a9ef712600516
Validity
Not Before: Jan 31 13:00:39 2025 GMT
Not After : Feb 1 13:00:39 2025 GMT
Subject: CN=69f376462d620f350ee8c16ecdef18730d6abdc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2d:91:d8:ed:ff:71:20:c6:01:28:c9:58:13:
12:8f:0f:ad:28:92:c3:ac:f1:1b:bc:a8:3f:07:29:
9e:84:ef:8c:82:45:ae:36:1a:51:22:0c:3d:61:d4:
1b:3a:7c:af:d6:68:51:89:28:17:8e:f5:f9:9f:df:
89:3a:d7:7b:6d:c6:71:22:02:0f:54:8f:cf:bb:86:
7e:d6:09:ef:69:87:c7:b3:93:45:6f:5f:9f:5b:7e:
a6:ab:6f:11:0c:c6:e0:28:f4:42:8d:2a:af:52:4b:
2d:b8:ba:fb:7d:1b:da:bb:a0:2f:e5:35:f6:30:9c:
c7:94:d0:60:f5:5f:33:f7:e0:58:e7:80:0a:e0:0d:
78:61:76:10:45:7b:7b:18:64:b9:c1:33:61:07:12:
6d:d4:29:a6:9b:26:6a:ce:ac:da:6b:09:3b:5e:9e:
85:55:98:05:17:df:10:fe:87:01:12:de:08:df:87:
ae:0b:d6:d2:35:17:b6:3d:92:70:32:9b:03:e2:0b:
a6:93:90:8a:fa:ba:3a:e7:4c:64:27:03:33:e4:80:
0d:7b:ce:0e:db:0d:29:d5:ce:15:4f:47:cf:73:b8:
98:2d:ec:71:8f:ed:9f:60:5c:58:76:47:53:4c:e0:
3c:13:fd:f3:d8:86:9b:e8:fb:2c:03:73:3c:a2:94:
94:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:F3:76:46:2D:62:0F:35:0E:E8:C1:6E:CD:EF:18:73:0D:6A:BD:C5
X509v3 Authority Key Identifier:
keyid:1A:17:80:92:70:47:0D:7C:25:67:11:2F:B4:0A:9E:F7:12:60:05:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GheAknBHDXwlZxEvtAqe9xJgBRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/f47710-4a23-4bdc-9541-8afa74d8769f/1/GheAknBHDXwlZxEvtAqe9xJgBRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/f47710-4a23-4bdc-9541-8afa74d8769f/1/GheAknBHDXwlZxEvtAqe9xJgBRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:bb:18:5a:c3:6a:a9:45:cf:bb:c0:07:47:7e:c8:62:68:c6:
f4:ee:4b:e6:b8:35:c8:20:89:35:a6:da:5c:37:65:78:b2:ea:
55:32:0c:9e:93:ca:ac:a6:89:fd:17:23:5f:32:73:cb:fa:7e:
36:64:26:c8:79:3d:69:36:c3:98:dc:2e:c0:72:41:06:b3:16:
5b:05:3d:5d:64:ee:7a:12:9f:61:2a:ad:46:a3:aa:09:0a:96:
26:03:fc:5d:1c:b8:43:ed:9d:0c:cb:54:ca:96:7c:c4:d5:e7:
04:95:4d:36:cf:5d:3b:42:9f:1f:7d:26:58:da:5c:4a:dd:4e:
6e:18:0c:bf:ba:34:c3:d7:b1:07:c2:b9:60:de:eb:2d:9c:1c:
ad:d6:35:25:9d:7b:1e:01:df:50:c9:bf:8e:85:0d:6c:0e:6c:
f3:47:14:37:4a:58:47:34:aa:cd:41:9b:a0:ae:a4:a8:84:44:
a1:9d:ee:b0:40:e9:14:a0:b3:49:c2:41:cf:15:17:4c:fb:00:
8f:d1:55:51:70:54:33:a0:d2:63:5d:b4:45:5e:3d:f6:64:7e:
89:74:47:31:27:4e:7a:45:42:bd:00:75:4d:a2:3e:0e:b8:80:
7f:ba:ce:13:11:eb:42:c1:a7:31:69:4c:74:25:7e:28:35:6e:
6e:24:49:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:46 2025 by rpki-client